upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-09 01:30:39 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/chain
History
Mark Andrews de519cd1c9 Don't leak the original QTYPE to parent zone 
When performing QNAME minimization, named now sends an NS
query for the original QNAME, to prevent the parent zone from
receiving the QTYPE.

For example, when looking up example.com/A, we now send NS queries
for both com and example.com before sending the A query to the
servers for example.com.  Previously, an A query for example.com
would have been sent to the servers for com.

Several system tests needed to be adjusted for the new query pattern:

- Some queries in the serve-stale test were sent to the wrong server.
- The synthfromdnssec test could fail due to timing issues; this
  has been addressed by adding a 1-second delay.
- The cookie test could fail due to the a change in the count of
  TSIG records received in the "check that missing COOKIE with a
  valid TSIG signed response does not trigger TCP fallback" test case.
- The GL #4652 regression test case in the chain system test depends
  on a particular query order, which no longer occurs when QNAME
  minimization is active. We now disable qname-minimization
  for that test.
2025-03-14 01:01:26 +00:00
..
ans3 add a test for handling illegal NS below DNAME 2024-04-02 10:00:03 +02:00
ans4 Adapt to Python scripts to black 23.1.0 2023-02-17 15:31:52 +01:00
ns1 add a test for handling illegal NS below DNAME 2024-04-02 10:00:03 +02:00
ns2 add a test for handling illegal NS below DNAME 2024-04-02 10:00:03 +02:00
ns5 add a test for handling illegal NS below DNAME 2024-04-02 10:00:03 +02:00
ns7 Don't leak the original QTYPE to parent zone 2025-03-14 01:01:26 +00:00
prereq.sh Reformat shell scripts with shfmt 2023-10-26 10:23:50 +02:00
README Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
setup.sh Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
tests.sh implement 'max-query-restarts' 2024-08-07 13:20:05 -07:00
tests_sh_chain.py Replace clean.sh files with extra_artifacts mark 2024-11-08 10:54:24 +01:00

README 

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

SPDX-License-Identifier: MPL-2.0

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0.  If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.

See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.

ns1 is the root server.

ns2 and ns5 are both authoritative servers.

ans3 is a mock authoritative server that can return various broken
responses.

ans4 is a mock authoritative server that can return CNAME or DNAME
responses of arbitrary size in arbitrary order.

ns7 is the resolver under test.